[java-idp-plugin-webauthn] branch main updated: Update default metadata service URL to MDSv3

Phil Smart philip.smart at jisc.ac.uk
Fri Mar 15 11:27:40 UTC 2024


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=561f3cef5b1c72d14e3cb6ad57acf1fe044d0f65

The following commit(s) were added to refs/heads/main by this push:
     new 561f3ce  Update default metadata service URL to MDSv3
561f3ce is described below

commit 561f3cef5b1c72d14e3cb6ad57acf1fe044d0f65
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Mar 15 11:27:38 2024 +0000

    Update default metadata service URL to MDSv3
---
 .../src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml   | 2 +-
 .../idp/plugin/authn/webauthn/conf/authn/webauthn.properties        | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index efaf5c1..5de6433 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -93,7 +93,7 @@
         lazy-init="true"
         p:trustRootFile="%{idp.authn.webauthn.metadata.trustRootFile:}"
         p:cacheFile="%{idp.authn.webauthn.metadata.cacheFile:}"
-        p:metadataBlobUrl="%{idp.authn.webauthn.metadata.metadataBlobUrl:https://mds.fidoalliance.org}"
+        p:metadataBlobUrl="%{idp.authn.webauthn.metadata.metadataBlobUrl:https://mds3.fidoalliance.org}"
         p:metadataBlobFile="%{idp.authn.webauthn.metadata.metadataBlobFile:}"
         p:expectedLegalHeaders="%{idp.authn.webauthn.metadata.expectedLegalHeaders:Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/}"/>
            
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 37ad201..ba1ec74 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -13,8 +13,8 @@ idp.authn.webauthn.relyingPartyName = Shibboleth
 #idp.authn.webauthn.allowOriginSubdomain = false
 
 # Allow credential registrations to be untrusted, the default. If false, this requires attestation statements from the 
-# authenticator using the idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT property  
-# and FIDO metadata is loaded and itself trusted.
+# authenticator using 'idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT' and FIDO metadata is 
+# loaded and trusted.
 #idp.authn.webauthn.allowUntrustedAttestation = true
 
 # Generic flow properties to adjust behavior
@@ -48,7 +48,7 @@ idp.authn.webauthn.supportedPrincipals = \
 
 ## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
 #idp.authn.webauthn.metadata.cacheFile = 
-#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds.fidoalliance.org
+#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
 
 ## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
 #idp.authn.webauthn.metadata.metadataBlobFile = 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list